This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: XF6fwEG76m5V60n7SRxdudsQo1JIWwfLcus56HUa6bE= Subject key identifier: 52:88:49:8C:A1:2E:B3:EB:D5:CB:55:C1:0B:75:17:BD:63:0C:BE:42 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 54 Signing time: Tue 23 Dec 2025 06:06:57 +0000 Manifest this update: Tue 23 Dec 2025 06:06:57 +0000 Manifest next update: Tue 30 Dec 2025 06:06:57 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: EaXuQyVYZzs8M4M7NQ49/9NSwoMDs32ObvMZ66YB8Fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Dec 23 06:06:57 2025 GMT Not After : Dec 30 06:06:57 2025 GMT Subject: CN=694a3181-7544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:fa:5f:03:11:f6:ab:9f:c1:2a:30:4c:85: d0:36:4f:72:40:0f:40:3c:75:1f:8c:5e:7d:ec:e1: c4:c5:c7:41:4b:2b:d1:6d:1c:b1:6e:2d:98:07:73: 06:b0:57:f4:40:d2:9c:41:2d:b0:3b:55:24:c1:14: ee:ee:01:c3:41:6a:bc:2a:2d:27:5a:50:24:a2:40: 46:c7:a5:8d:6e:d9:7a:35:d7:d4:48:85:ed:30:21: a3:94:70:3d:c1:0d:a0:56:66:fb:3e:f6:f2:aa:67: af:83:64:75:36:fe:0a:aa:76:6d:5d:d9:ca:c4:ba: fd:be:0e:89:f4:54:74:2b:24:b6:25:91:ad:69:6d: cc:f4:04:86:5a:2f:f2:c8:40:0a:ba:8c:82:1a:8a: d3:18:4d:94:d1:48:c6:e7:fb:9a:9d:81:90:71:41: b1:d8:45:1a:fd:c3:f7:b9:ca:1b:10:2c:70:f1:e1: d2:46:dd:1f:99:85:8f:f9:86:53:b1:b7:a0:5a:b4: fd:78:84:f8:70:81:6d:c1:bc:23:ef:44:37:18:4c: ad:0e:87:dd:ea:8f:07:c8:70:a1:38:5e:eb:f2:86: c8:b3:80:7d:52:4b:e0:c8:aa:48:ed:c1:b7:4e:44: 52:76:49:9d:cb:c3:b5:1d:e7:91:ad:27:0f:fe:81: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:88:49:8C:A1:2E:B3:EB:D5:CB:55:C1:0B:75:17:BD:63:0C:BE:42 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:04:93:c7:34:27:c3:de:d4:17:c0:05:11:b9:7a:e2:2c: aa:b2:6c:a5:7d:0e:19:58:47:1a:95:21:34:00:de:e6:98:6e: e8:45:48:47:1a:ee:12:93:13:e1:1e:e6:93:dd:9a:60:e6:6b: 11:06:27:9b:c0:2d:c1:e4:cf:5d:f6:c0:93:1f:db:c0:f4:1c: 9e:89:46:c3:8f:d5:2b:e3:f2:b3:8b:a8:40:1e:80:bf:f7:e2: bd:ae:2a:a2:75:dc:1b:4c:d7:ee:13:e7:a1:e5:d7:c1:21:bc: ff:6b:7a:0e:01:3b:a7:94:a7:23:dc:63:0d:87:21:a2:6a:88: 25:8b:e0:44:bb:3d:1f:98:0f:47:1f:88:ab:e2:a5:ca:c5:f9: fa:2d:60:81:d6:de:92:a1:01:b3:d6:20:44:63:18:ad:f3:bf: 60:dd:3b:49:6b:36:d4:d3:c4:c3:35:1f:8d:3f:59:d7:7c:ec: ad:46:16:e6:a6:ec:7c:87:b7:b6:0a:4f:06:64:fa:5e:70:35: 20:b9:b1:69:3b:ae:c9:7e:38:f6:e9:cf:b1:55:e2:8b:be:da: ef:da:43:bd:67:38:b9:3b:80:4e:c3:1c:a4:a3:6c:38:53:8a: 66:79:9a:1f:23:74:c3:72:73:ce:82:bd:19:3d:9e:86:f7:76: 49:c7:e5:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTEyMjMwNjA2NTdaFw0yNTEyMzAwNjA2NTdaMBgxFjAUBgNV BAMMDTY5NGEzMTgxLTc1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeV/pfAxH2q5/BKjBMhdA2T3JAD0A8dR+MXn3s4cTFx0FLK9FtHLFuLZgHcwaw V/RA0pxBLbA7VSTBFO7uAcNBarwqLSdaUCSiQEbHpY1u2Xo119RIhe0wIaOUcD3B DaBWZvs+9vKqZ6+DZHU2/gqqdm1d2crEuv2+Don0VHQrJLYlka1pbcz0BIZaL/LI QAq6jIIaitMYTZTRSMbn+5qdgZBxQbHYRRr9w/e5yhsQLHDx4dJG3R+ZhY/5hlOx t6BatP14hPhwgW3BvCPvRDcYTK0Oh93qjwfIcKE4XuvyhsizgH1SS+DIqkjtwbdO RFJ2SZ3Lw7Ud55GtJw/+gWi/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUohJjKEu s+vVy1XBC3UXvWMMvkIwHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYUBJPHNCfD3tQXwAURuXriLKqybKV9DhlYRxqVITQA3uaYbuhFSEca 7hKTE+Ee5pPdmmDmaxEGJ5vALcHkz132wJMf28D0HJ6JRsOP1Svj8rOLqEAegL/3 4r2uKqJ13BtM1+4T56Hl18EhvP9reg4BO6eUpyPcYw2HIaJqiCWL4ES7PR+YD0cf iKvipcrF+fotYIHW3pKhAbPWIERjGK3zv2DdO0lrNtTTxMM1H40/Wdd87K1GFuam 7HyHt7YKTwZk+l5wNSC5sWk7rsl+OPbpz7FV4ou+2u/aQ71nOLk7gE7DHKSjbDhT imZ5mh8jdMNyc86CvRk9nob3dknH5Sg= -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:24 2025 by rpki-client